CNNVD-202508-1633 Information
CNNVD ID
CNNVD-202508-1633
Related CVE
- CNNVD Published: 2025-08-14
Description (Chinese)
PostgreSQL是PostgreSQL组织的一套自由的对象关系型数据库管理系统。该系统支持大部分SQL标准并且提供了许多其他特性，例如外键、触发器、视图等。 PostgreSQL 17.6版本、16.10版本、15.14版本、14.19版本和13.22之前版本存在安全漏洞，该漏洞源于优化器统计信息可能绕过视图ACL和行安全策略泄露采样数据。
Description (English)
PostgreSQL is a free client relationship database management system organized by PostgreSQL. The system supports most SQL standards and provides many other features, such as external keys, triggers, views, etc. There is a security loophole in PostgreSQL version 17.6, 16.10, 15.14, 14.19 and previous versions 13.22, which stems from the possibility that the optimizer statistical information may be leaking sampling data around views ACL and line security strategies.
Hazard Level
Critical
Vulnerability Type
其他
Published
2025-08-14
Last Modified
2026-02-24
References
https://www.postgresql.org/support/security/CVE-2025-8713/ https://vigilance.fr/vulnerability/PostgreSQL-information-disclosure-via-Optimizer-Statistics-47996 https://nvd.nist.gov/vuln/detail/CVE-2025-8713
Patch
https://www.postgresql.org/support/security/CVE-2025-8713/
Share on: